[Nottingham] Fw: OpenSSL worm in the wild

Graeme Fowler nottingham at mailman.lug.org.uk
Mon Sep 16 09:55:01 2002


On Monday, September 16, 2002, at 08:09 AM, Jason wrote:
>> I have now seen a worm for the OpenSSL problems I reported a few weeks
>> back in the wild. Anyone who has not patched/upgraded to 0.9.6e+ should
>> be _seriously worried_.

...and I have seen it. I had a wonderful afternoon on Saturday, forcibly 
upgrading a stack of machines and implementing UDP port blocks all over 
the shop.

I must say, however, that it's an *exceedingly* well coded piece of work.

Graeme